Principal Platform Engineer

Principal Platform Engineer 📍Remote (UK/Ireland) - Citizenship/Settled Status/ILR Required 💷Up to £90k + 7% bonus Every product our client ships runs on one secure hosting core: their own private cloud, spanning data centres, private cloud, OCI, AWS and Azure. As their engineering teams speed up with AI, that platform decides how fast and how safely the business can move. Our client is a global payments technology company, and they're looking for a Principal Platform Engineer to design that platform and write the software that runs it. You'll think in systems: how DNS, identity, certificates, secrets, networks and workloads fit together, and how they fail. You'll remove whole classes of security and reliability problems rather than fixing them one at a time. What you'll be doing - Designing the secure hosting core across on prem, private and public cloud - Building control planes that drive DNS, load balancers, firewalls and cloud through their APIs, with drift detection - Running DNS and edge, including DNSSEC and Cloudflare origin protection - Leading the move from Active Directory to Entra ID, and building an internal identity platform for just in time and privileged access - Running the certificate authority on Vault, with mTLS, automated rotation and secrets read by reference - Moving network and egress control to policy as code, with zero trust and identity based segmentation - Running the platform to SLOs, owning safe deployments, and leading during major incidents What you'll bring - Senior or lead experience designing, building and running production infrastructure platforms - Expert in Go, Java, C# or Rust, writing production code daily - Deep DNS, PKI and certificates, secrets management and network security knowledge - Identity experience across Active Directory, Entra ID, OAuth, OIDC and SAML - Hybrid cloud design across on prem, private and public cloud - SRE practices: SLOs, error budgets, canary and blue green releases, incident command - Bonus points for Cloudflare, Vault PKI, Terraform, OPA, Palo Alto, HAProxy, Consul or AI coding tools like Claude Code Why it's worth a conversation - Real ownership, without the red tape you’d get at a hyperscaler - Fully remote, with flexible hours - 45 days holiday + bank holidays, private health insurance and a 5% pension - £500 home office setup budget plus a monthly WFH allowance - Hackathons, summer and Christmas meetups, and a paid volunteering day You'll need to be based in the UK or Ireland and already have the right to work there. Visa sponsorship isn't available. Research indicates that men will apply to a role when they only meet 50-60% of the descriptions, however, when looking at women and other minority groups, they can look for up to a 99% match in order to apply to a role. If you feel you are a fit for our role, please still apply, don’t worry if you don’t tick every single box. We’d still love to hear from you. We encourage underrepresented talent to apply to all our roles & support accessibility needs